Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9zAuj7_g4x6jfKZefX3RSwASO_4.roa
File:                     9zAuj7_g4x6jfKZefX3RSwASO_4.roa (download)
Hash identifier:          3GDFkJR4OaA5LyzuoG3WUlRL8SuiTkx9YLvHXKBhMKA=
Subject key identifier:   F7:30:2E:8F:BF:E0:E3:1E:A3:7C:A6:5E:7D:7D:D1:4B:00:12:3B:FE
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       046E0B71
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9zAuj7_g4x6jfKZefX3RSwASO_4.roa
ROA valid until:          Jul 01 00:00:00 2023 GMT
asID:                     400040
IP address blocks:
    1: 193.109.192.0/24 maxlen: 24
    2: 85.237.197.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74320753 (0x46e0b71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan  7 00:45:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7302e8fbfe0e31ea37ca65e7d7dd14b00123bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:e2:9a:a1:28:5b:93:bf:a8:90:90:bb:b3:
                    3c:46:e9:9c:46:db:3d:81:bb:19:6d:fa:24:1a:31:
                    10:cb:50:f1:9e:63:e8:03:a0:d0:55:c6:d2:fc:5d:
                    8d:ba:37:de:8f:4c:1a:33:5c:00:32:86:63:36:89:
                    85:88:f8:4d:8c:a1:84:6a:13:cd:56:d4:ea:e7:09:
                    1e:84:39:2b:41:aa:1f:8d:05:52:c2:ec:48:40:fc:
                    8a:46:7b:47:08:a1:0c:18:77:d4:2f:53:a4:8e:ed:
                    59:45:41:42:b2:fa:63:62:43:29:43:4a:c3:63:ca:
                    f3:6b:dd:b5:06:e7:d5:f4:40:ef:57:f3:43:ae:bc:
                    2d:fc:de:b7:6d:18:41:76:cf:e7:49:d4:98:6c:29:
                    06:9c:1c:0a:7a:0f:51:e7:56:8e:3a:9c:a1:9b:00:
                    36:c6:a7:cc:f9:f5:4c:df:f5:9f:5f:2c:73:e7:40:
                    7e:56:03:25:89:82:7f:56:0a:17:b4:22:5f:d5:83:
                    c6:02:55:98:8f:29:96:8b:ad:e0:be:b8:b4:d2:fe:
                    65:c1:06:a8:27:8c:c7:e4:65:54:54:ac:7d:e7:19:
                    8b:25:48:ed:b0:19:b4:cd:4f:1a:22:93:47:74:2e:
                    b9:cc:54:86:4e:80:77:a5:b1:51:db:c4:29:eb:ba:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:30:2E:8F:BF:E0:E3:1E:A3:7C:A6:5E:7D:7D:D1:4B:00:12:3B:FE
            X509v3 Authority Key Identifier: 
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9zAuj7_g4x6jfKZefX3RSwASO_4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.197.0/24
                  193.109.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:9f:18:2d:81:40:7f:82:f0:42:35:1e:9f:3f:10:37:cb:f9:
         71:43:e6:a9:9e:ef:53:30:81:4c:c0:2b:41:a8:73:ce:d4:a9:
         58:46:c2:24:10:83:c8:62:3c:e3:ca:46:3f:8b:52:06:17:a7:
         1f:f1:d0:16:cf:a4:b7:89:8e:2c:e0:44:d2:46:c9:f6:e6:d5:
         4b:ed:81:5a:79:55:01:50:ca:df:94:ad:db:2c:b3:4e:94:1d:
         18:24:38:97:06:c4:f6:18:08:44:8d:e7:de:0b:2b:f7:ff:79:
         c4:a2:9a:d0:93:12:52:1b:5a:bf:da:43:d5:b8:20:8e:75:90:
         59:54:1f:54:c5:61:24:a5:c6:c7:20:38:86:53:be:93:e9:04:
         80:0a:f2:27:ab:40:f5:3f:49:31:e2:3d:4b:d4:4d:0a:f5:e2:
         ba:1d:91:4a:65:40:10:0f:7d:90:dd:ee:c0:26:b4:1e:6d:c6:
         f6:ed:02:37:a6:2e:8c:7c:61:e9:c2:f9:f7:a1:c1:2e:c3:c2:
         f0:93:d0:b5:7a:3b:08:b4:89:27:14:0f:44:96:b0:a8:63:91:
         2b:78:68:c8:69:a6:43:e2:18:5e:24:1b:f3:08:cf:8c:cf:e4:
         c6:c2:48:9d:f8:bc:d0:cf:55:d4:65:12:5c:bb:c6:f3:f9:3a:
         47:e0:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 04:24:56 2022 by rpki-client.